Daily briefing · July 11, 2026
Quiet Day Hides Real Teeth: Critical RCE in PraisonAI and Joomla Extensions Demand Attention
Automated Vexday summary · sources: NVD, CISA KEV, EPSS
Verdict of the day — calm
July 11, 2026 registers as a calm day by the numbers — no vulnerabilities weaponized, none under active exploitation, and no VulnCheck early-warning signals — but the disclosure list is far from trivial. Five critical flaws published today span AI agent frameworks and popular CMS extensions, with several carrying CVSS 10.0 scores and direct paths to remote code execution. Defenders should treat the absence of active exploitation as a shrinking window, not a green light to deprioritize patching.
Today’s brief
- PraisonAI hit with multiple critical flaws including a CVSS 10.0 RCE via unsandboxed LLM-generated code execution — patch to 1.6.78 or later immediately
- RSFiles for Joomla exposes an unauthenticated file upload leading to full server takeover — no credentials required
- WordPress ecosystem again under pressure: account takeover, auth bypass, and RCE bugs across four distinct plugins
- Brazil faces a heavy ransomware week with lockbit5, Deadlock, and qilin collectively claiming eight victims across public sector, manufacturing, and services
Critical highlights
1
PraisonAI before 1.6.78 executes LLM-generated Python code in CodeAgent with no AST validation, no import restrictions, and no sandbox — a successful prompt injection attack gives an adversary arbitrary code execution on the host and full access to environment secrets. CVSS 10.0 with a trivial attack surface through the chat interface makes this the top priority of the day.
2
CVE-2026-57827CVSS 10affects rsjoomla.com RSFiles extension for Joomla RSFiles, a Joomla extension by rsjoomla.com, allows unauthenticated upload of executable files, leading directly to full remote code execution. No authentication barrier means any internet-facing Joomla site running this extension is immediately at risk of complete server compromise.
3
A second critical PraisonAI flaw (CVSS 9.4) in the AICoder component allows attackers to inject malicious prompts via the chat interface, write files to arbitrary filesystem paths, and execute shell commands with root privileges — the combination of file write and command execution without path validation is a near-complete system takeover primitive.
4
PraisonAI before 4.6.78 passes an attacker-controlled integer dimension value directly into DDL queries for PGVector and Cassandra backends without runtime enforcement, enabling SQL injection into CREATE TABLE statements. While database-layer exploitation may require specific backend configurations, the attack surface is broad given PraisonAI's default deployment model.
5
CVE-2026-57828CVSS 9affects phoca.cz Phoca Download extension for Joomla Phoca Download for Joomla allows authenticated registered users — a very low bar — to upload executable files and achieve full remote code execution. Sites with open user registration are effectively exposed to unauthenticated RCE in practice.
6
CVE-2026-15155HIGH 8.8affects Essential Addons for Elementor – Popular Elementor Templates & Widgets Essential Addons for Elementor (up to 6.6.10) enables authenticated account takeover via email header injection in the Login/Register widget, where server-side validation of outgoing email headers is insufficient. An attacker with any authenticated foothold could escalate to administrator-level control of a WordPress site.
7
Swiss Toolkit For WP (up to 1.4.6) contains a file type validation bypass in upload_extension_files() that uses strpos() substring matching, allowing an attacker to upload executable files by embedding a permitted extension string anywhere in the filename. This class of bypass is well understood by attackers and typically straightforward to exploit.
8
CVE-2025-6784HIGH 8.8affects Code Engine – PHP Snippets, AI Functions & Automation for WordPress The Code Engine plugin for WordPress (up to 0.3.5) exposes server-side code execution to any Contributor-level user through an unrestricted shortcode, making it a reliable privilege escalation path on multi-author or open-registration WordPress sites.
9
CVE-2026-14262HIGH 8.8affects Simple JWT Login – Allows you to use JWT on REST endpoints. Simple JWT Login (up to 3.6.6) suffers an authentication bypass that allows attackers to inject arbitrary claims into JWT payloads not covered by the admin-configured key list, enabling privilege escalation to higher roles. Sites using JWT-based REST authentication should treat this as a critical configuration risk.
10
PraisonAI before 1.7.3 ships with an insecure default that binds the API to all network interfaces with no authentication and wildcard CORS, allowing unauthenticated actors to read agent instructions, system prompts, and invoke agents freely. Default-insecure configurations are particularly dangerous in cloud and container deployments where the service may be internet-reachable by accident.
Ransomware today
Ransomware activity targeting Brazil has been intense in recent days. LockBit 5 claimed three Brazilian victims — saude.mt.gov.br (Mato Grosso state health sector), santoinacio-rio.com.br, and lbreng.com.br — while the Deadlock group hit Werken Química Brasil S.A., Bombas Ideal, and Direção Estacionamentos S.A. across manufacturing and consumer services. The qilin group added S.J. Louis to its list, and incransom claimed tecnocurva.com.br, painting a picture of sustained, multi-group pressure on Brazilian organizations of all sizes.
santoinacio-rio.com.br BRlockbit5 · Business Services
lbreng.com.br BRlockbit5 · Business Services
saude.mt.gov.br BRlockbit5 · Public Sector
Werken Química Brasil S.A. BRDeadlock · Manufacturing
Bombas Ideal BRDeadlock · Manufacturing
Direção Estacionamentos S.A. BRDeadlock · Consumer Services
S.J. Louis BRqilin
lockbit3 39ransomhub 35lockbit5 29thegentlemen 208base 20arcusmedia 19
Active groups & APTs
Several threat actor groups are being tracked as active or recently updated, including againstthewest, apt73, the Iran-linked blackshadow, dragonforce, fulcrumsec, and coinbasecartel. None of these groups have confirmed victims associated with today's disclosures, but their monitored status indicates elevated readiness — defenders in sectors historically targeted by Iranian and hacktivist actors should remain alert.
Brazil focus
Brazil stands out sharply in today's threat landscape, with eight organizations claimed by ransomware groups in the recent period spanning public administration, manufacturing, business services, consumer services, and technology. The targeting of saude.mt.gov.br — a state government health portal — is particularly concerning given the sensitivity of health data and the potential for operational disruption to public services. The breadth of sectors and the simultaneous activity of lockbit5, Deadlock, qilin, and incransom signal that Brazilian organizations across all verticals remain high-value targets.
saude.mt.gov.brlockbit5 · Public Sector
santoinacio-rio.com.brlockbit5 · Business Services
lbreng.com.brlockbit5 · Business Services
Direção Estacionamentos S.A.Deadlock · Consumer Services
Werken Química Brasil S.A.Deadlock · Manufacturing
Bombas IdealDeadlock · Manufacturing
S.J. Louisqilin
tecnocurva.com.brincransom · Technology
Today’s recommendation: Prioritize patching PraisonAI to version 1.7.3 or later across all three critical CVEs and immediately disable or update RSFiles and Phoca Download on any internet-facing Joomla installations. WordPress administrators should audit plugin versions for all four affected plugins and restrict contributor-level upload and code-execution capabilities as a compensating control.
With critical RCE paths disclosed in AI frameworks, CMS extensions, and widely deployed WordPress plugins, now is the moment to validate whether any of these components exist — patched or unpatched — across your own attack surface before opportunistic actors do it for you.Find out in minutes, with a free exposure assessment, where your organization is truly exposed.Meet the Autonomous AI Pentest Agent →Previous briefings
August 6, 2026 — 10 Active Exploits, 1 Weaponized in a Day: Critical Alert Across WordPress, SharePoint, SonicWall, and MoreAugust 5, 2026 — Cisco SD-WAN, MarkLogic, and PraisonAI Lead a Batch of Critical CVEs on a Calm Exploitation DayAugust 4, 2026 — Quiet Day Masks 10 Critical CVEs: RCE, Auth Bypass, and Stack Overflows in FocusAugust 3, 2026 — Adobe Campaign Classic and WAPT Server Hit by Multiple CVSS 10.0 VulnerabilitiesAugust 2, 2026 — Bouncy Castle Mass Patch Day: Six Critical CVEs Drop Alongside SQL Injection and Auth Bypass FlawsAugust 1, 2026 — WordPress Auth Bypasses and FreeRDP Heap Flaws Top a Calm Vulnerability DayJuly 31, 2026 — Calm Day Hides Critical Flaws: Hard-coded Keys, File Uploads, and Code Injection Dominate July 31July 30, 2026 — 32 Critical CVEs, No Active Exploitation: Azure Cosmos DB and IBM Products Lead a Heavy Patch DayJuly 29, 2026 — Cisco FMC Under Active Exploit, Joomla Gridbox Cluster Hits Critical Mass with Four CVEsJuly 28, 2026 — Quiet Day Hides Critical Vulnerabilities: IBM WebSphere, Apache Axis2, and Joomla Top the ListJuly 27, 2026 — CVE-2026-16812: VeloCloud Orchestrator Under Active Exploitation as Critical Flaws Pile Up Across Enterprise and WordPress StacksJuly 26, 2026 — Quiet Vulnerability Day as Brazil Faces Ransomware Wave From Multiple GroupsJuly 25, 2026 — CVSS 10.0 in SiYuan and Auth Bypass in OpenRemote Lead a Calm Day for New ExploitsJuly 24, 2026 — Three CVSS 10.0 Microsoft Cloud Flaws Lead a Calm but Notable Patch Dayview full archive →